This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.mft File: jn3H8pi7d0pybtxDPPawOZQUi1Q.mft (raw, json) Hash identifier: lmPatH5CTLmhcNLESlQPXa1bEWc4ptn5mAYpIQXxbdA= Subject key identifier: 98:D9:18:28:FD:5E:7B:24:F6:C0:C0:6E:38:25:4C:A5:4E:F6:5E:15 Authority key identifier: 8E:7D:C7:F2:98:BB:77:4A:72:6E:DC:43:3C:F6:B0:39:94:14:8B:54 Certificate issuer: /CN=8e7dc7f298bb774a726edc433cf6b03994148b54 Certificate serial: 019AF1D23CE65DFC397C532F9F3766EAABDF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jn3H8pi7d0pybtxDPPawOZQUi1Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 04:01:18 +0000 Manifest this update: Sat 06 Dec 2025 04:01:18 +0000 Manifest next update: Sun 07 Dec 2025 04:01:18 +0000 Files and hashes: 1: FA2rdoTSXTpaNGTDT0aW6V9L25M.roa (hash: kkZFYMyw4KlTxS4PayeQH7gSgukCRNxFXWHYmYwHPJM=) 2: jn3H8pi7d0pybtxDPPawOZQUi1Q.crl (hash: LejgEbxWeeCk0lAo35687pf2M047+etIJ45glV4orpM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.mft rsync://rpki.ripe.net/repository/DEFAULT/jn3H8pi7d0pybtxDPPawOZQUi1Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:3c:e6:5d:fc:39:7c:53:2f:9f:37:66:ea:ab:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e7dc7f298bb774a726edc433cf6b03994148b54 Validity Not Before: Dec 6 04:01:18 2025 GMT Not After : Dec 7 04:01:18 2025 GMT Subject: CN=98d91828fd5e7b24f6c0c06e38254ca54ef65e15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:72:68:e8:54:c5:cc:55:02:eb:77:3e:4d:86: aa:10:67:46:4e:59:56:1a:34:3b:ad:ba:34:04:d0: d5:10:46:d3:18:58:3b:75:82:03:be:26:f7:ff:f6: 3d:b5:65:12:36:92:e1:58:3a:38:fa:aa:66:51:f0: 9a:fb:ac:fc:5f:4c:58:a5:ab:ee:e0:17:6e:ee:e9: 20:8e:d1:ec:66:3d:2b:72:38:03:63:c3:c0:70:e5: 13:b9:24:27:b0:8f:d6:4f:f3:00:29:9f:05:60:41: 37:a2:4b:94:13:f5:48:89:8a:1e:33:07:62:10:d3: 08:ca:3b:44:79:73:b7:d0:47:63:f7:28:d7:93:c1: 38:ab:15:87:6b:31:5d:8f:52:d7:d3:2c:37:96:68: c3:0e:f9:7f:5d:85:46:26:9d:c2:9b:3e:0b:20:65: f7:21:fe:ac:22:3d:00:74:ad:63:8c:59:e8:da:cb: d9:a5:f5:33:24:f4:f6:ec:c6:5d:6e:7a:c8:cc:e4: 9a:6b:58:62:8d:f3:e8:36:9b:80:62:bb:2d:63:49: 02:31:3f:3b:f1:66:b7:41:98:6b:53:50:ed:cf:02: 4a:9b:8a:87:bc:1d:a8:17:2f:a6:53:06:c2:0f:ef: 39:60:ce:6d:d8:a4:de:9d:03:57:5a:16:65:e5:d6: 33:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:D9:18:28:FD:5E:7B:24:F6:C0:C0:6E:38:25:4C:A5:4E:F6:5E:15 X509v3 Authority Key Identifier: keyid:8E:7D:C7:F2:98:BB:77:4A:72:6E:DC:43:3C:F6:B0:39:94:14:8B:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jn3H8pi7d0pybtxDPPawOZQUi1Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:f2:62:91:b7:1e:52:29:21:0e:15:1a:bc:b7:e0:3d:aa:ce: b2:29:38:99:9b:72:2b:6d:69:62:06:5a:99:01:a8:6a:32:fa: b1:7d:3f:96:75:9c:09:ed:17:f0:94:37:0b:cb:f1:16:00:8c: 2d:af:10:42:64:16:03:43:78:59:69:3e:1f:37:b7:b9:4b:45: 87:c3:a9:12:40:32:a9:f2:67:f0:83:36:2a:7c:5e:21:98:49: f7:e3:bc:d8:f3:11:00:52:1f:93:fa:fd:de:22:81:3c:39:19: 61:8c:51:01:0e:0c:95:76:9e:60:65:6e:b7:16:5c:1b:be:f3: 11:32:76:6c:d7:df:7e:af:6d:17:b9:96:14:c4:23:58:5f:70: 09:c1:76:56:a8:c7:4b:78:43:61:5f:27:14:78:2a:36:e2:03: 86:4f:41:a9:af:68:c6:17:77:c0:60:f8:9c:df:13:01:99:3c: b3:95:c5:5e:af:d9:36:7d:9f:9c:5c:d2:6a:08:90:33:0e:b8: 07:02:ea:e1:50:6f:24:1a:9d:e9:89:b1:30:03:70:1c:cd:bb: 3e:2d:95:c0:d3:7d:dd:89:c3:c3:f2:47:cc:28:eb:b3:8e:c8: 66:c7:18:04:e9:62:5f:b2:f5:4b:71:5e:9a:f8:9e:9f:de:43: ec:c3:c6:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0jzmXfw5fFMvnzdm6qvfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlN2RjN2YyOThiYjc3NGE3MjZlZGM0MzNjZjZiMDM5OTQx NDhiNTQwHhcNMjUxMjA2MDQwMTE4WhcNMjUxMjA3MDQwMTE4WjAzMTEwLwYDVQQD Eyg5OGQ5MTgyOGZkNWU3YjI0ZjZjMGMwNmUzODI1NGNhNTRlZjY1ZTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3Jo6FTFzFUC63c+TYaqEGdGTllW GjQ7rbo0BNDVEEbTGFg7dYIDvib3//Y9tWUSNpLhWDo4+qpmUfCa+6z8X0xYpavu 4Bdu7ukgjtHsZj0rcjgDY8PAcOUTuSQnsI/WT/MAKZ8FYEE3okuUE/VIiYoeMwdi ENMIyjtEeXO30Edj9yjXk8E4qxWHazFdj1LX0yw3lmjDDvl/XYVGJp3Cmz4LIGX3 If6sIj0AdK1jjFno2svZpfUzJPT27MZdbnrIzOSaa1hijfPoNpuAYrstY0kCMT87 8Wa3QZhrU1DtzwJKm4qHvB2oFy+mUwbCD+85YM5t2KTenQNXWhZl5dYzBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJjZGCj9Xnsk9sDAbjglTKVO9l4VMB8GA1UdIwQY MBaAFI59x/KYu3dKcm7cQzz2sDmUFItUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvam4zSDhwaTdkMHB5YnR4RFBQYXdPWlFVaTFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yMGVlNDMtMDQ2Mi00ODIyLTg0NWYt OWM3NmE0YmRiNTIzLzEvam4zSDhwaTdkMHB5YnR4RFBQYXdPWlFVaTFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8yMGVlNDMtMDQ2Mi00ODIyLTg0NWYtOWM3NmE0YmRiNTIz LzEvam4zSDhwaTdkMHB5YnR4RFBQYXdPWlFVaTFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYvJikbce UikhDhUavLfgParOsik4mZtyK21pYgZamQGoajL6sX0/lnWcCe0X8JQ3C8vxFgCM La8QQmQWA0N4WWk+Hze3uUtFh8OpEkAyqfJn8IM2KnxeIZhJ9+O82PMRAFIfk/r9 3iKBPDkZYYxRAQ4MlXaeYGVutxZcG77zETJ2bNfffq9tF7mWFMQjWF9wCcF2VqjH S3hDYV8nFHgqNuIDhk9Bqa9oxhd3wGD4nN8TAZk8s5XFXq/ZNn2fnFzSagiQMw64 BwLq4VBvJBqd6YmxMANwHM27Pi2VwNN93YnDw/JHzCjrs47IZscYBOliX7L1S3Fe mvien95D7MPGbg== -----END CERTIFICATE-----Generated at Sat Dec 6 15:30:32 2025 by rpki-client